In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6 | Oct 1, 2024 | Jan 30, 2018 |
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | Jan 30, 2018 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Jan 30, 2018 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Jan 30, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2018 |
| Suse | — | Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1-32bitUpgrade GraphicsMagickUpgrade libGraphicsMagick2Upgrade ImageMagickUpgrade perl-PerlMagickUpgrade libMagickWand1Upgrade libMagickCore1-32bitUpgrade perl-GraphicsMagickUpgrade libMagick++-6_Q16-3Upgrade libMagick++-develUpgrade libMagickCore1Upgrade libMagickCore-6_Q16-1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagickWand-6_Q16-1Upgrade libMagick++1 | Feb 21, 2018 | Jan 30, 2018 |
| Ubuntu | — | Upgrade libmagick++-6.q16-7Upgrade libmagick++5Upgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2Upgrade libmagickcore5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extra | Jun 19, 2018 | Jan 30, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub